Student Data Privacy

• Skila is FERPA-compliant by design, supporting district control over student education records.
• We collect only the minimum data required to deliver educational functionality.
• Student data is never sold or used for advertising.
• Access to student data is role-based and restricted to authorized users.

Children's Online Privacy (COPPA)

• Skila is designed for use in schools under educator supervision.
• We support COPPA-compliant data practices and rely on school consent for student access.
• Parent visibility is supported where applicable, including rewards, progress, and engagement.

Security Practices

Skila follows SOC 2–aligned security principles as part of our ongoing security roadmap.

Our platform uses:

• Secure authentication
• Role-based permissions
• Encrypted data storage and transmission
• Regular internal reviews of access controls

Skila is not currently SOC 2 certified, but our systems and practices are aligned with SOC 2 Trust Service Criteria as we scale.

Global Data Protection (GDPR Alignment)

Skila follows GDPR-aligned data practices, including:

• Data minimization
• Purpose limitation
• User access and correction rights (as applicable)

Data is processed solely for educational purposes.

District Agreements & Compliance

• Skila is SDPC / National Data Privacy Agreement (NDPA) ready.
• We are prepared to execute district-specific data privacy agreements upon request.
• We collaborate with districts to meet local and state compliance requirements.